Privacy Policy
Last updated 16 October 2026 · applies to the Eluna Play app on every platform (Android, Android TV, Fire TV, iPhone and iPad, Apple TV, Mac, Windows, Roku and Smart TVs) and to this website (elunaplay.com).
In short
- Eluna Play is a media player: it does not provide, host or sell any content.
- The app has no sign-up or account. We do not ask for your name, e-mail, phone number or location.
- We show no ads, use no analytics or trackers and do not sell data.
- What you add and set up stays on your device. Our servers only receive what is needed to register and activate the device (section 2).
- This website uses no trackers or analytics; only the Send playlist page uses a session cookie, while you manage a device.
1. What Eluna Play is
It is a media player with an interface made for TV, phone and computer, with two modes:
- My lists: you add the addresses of the videos and music you want to play and organise them in lists. The app also offers a sample library of freely licensed films and music (see the Credits).
- My provider: you use the service you already have with the provider of your choice, who activates the device or gives you an access code. There is also a demo mode with our own test videos.
All content other than the samples and the demo comes from the sources you enter or from your provider's server, under their responsibility and yours.
2. The only data used for activation
When you open the app for the first time, it creates a random installation ID and sends it over a secure connection (HTTPS) to our servers, together with the platform (for example Android TV or Windows), the device model and the app version. The server also records the IP address and the registration and last-access dates. In return the device gets a code (Device ID and Key), shown on screen, which you give your provider if you want them to activate the device.
This ID does not reveal who you are: it only identifies the app installation. We use this data only to register and activate the device, deliver the access your provider set up, keep the service running and prevent abuse.
3. What stays only on your device
| Information | Where it is kept |
|---|---|
| Lists, videos and music you add in My lists | The app's local storage |
| Your provider's access details (server code, username and password) | The system's secure storage (Keystore on Android, Keychain on iPhone and Apple TV); on Smart TVs and the Mac, the app's local storage |
| Preferences, language and the parental PIN | The app's local storage |
| Favourites, history and “continue watching” | The app's local storage |
| Cached catalogue, artwork and information, to open faster | The app's local storage |
None of this is sent to us. Exception: when you sign in with a partner server code, the code, username and password go through our server, which checks the account on that partner's server and records the username to control the device's seat. If your provider sets up the access in their panel instead of you typing it, the access details are stored on our server only to be delivered to your device. To delete them, use Settings → Clear cache, delete the lists in My lists, use Settings → Account → Sign out or uninstall the app.
4. Permissions
Only those needed to work: internet and network state, to fetch videos and music, and background playback and picture-in-picture, so the video keeps playing when you leave the app. Eluna Play does not access location, camera, microphone, contacts, photos, personal files or the advertising ID.
5. What the app looks up to work
- Your sources and your provider: the app talks directly to the addresses you added or to the server your provider indicated, and video never goes through our servers. What those servers log (such as your IP) follows their own policies.
- Artwork, cast and highlights (TMDB): to show synopses, cast photos and the “Top 10 of the week”, the app asks our server for a title's public information by name and year. Our server queries The Movie Database (TMDB) without sending any data about you. Images load from image.tmdb.org, which sees your IP, like any website.
- Football guide: when you open the guide, the app asks our server for the day's matches, which come from sports data services without any data about you. Team crests load from those services' image servers, which see your IP.
- Images from your sources: artwork and icons of your lists or your provider load from the addresses they indicate.
- Approximate location: so our team knows where an access comes from (city and internet provider), the IP address is looked up at the freeipapi.com geolocation service. We do not use this for advertising.
- Chromecast (Android and iPhone): when casting to a TV, the Google Cast SDK logs anonymous technical events of the session, without the title or the address of the video.
- App stores: Google Play, the App Store, the Microsoft Store, Amazon, Roku and the Smart TV stores may collect data under their own policies (for example aggregated crash reports).
6. What Eluna Play does not do
- It shows no ads and includes no advertising SDK.
- It uses no Google Analytics, Facebook SDK or any other analytics.
- It builds no usage profile and does not sell or share data for advertising.
7. Who we share with
- The provider or reseller that activated your device, who sees the device code, status and expiry in their panel.
- The processors that handle data on our behalf, only so the service works: server hosting, content delivery and protection network (CDN) and the geolocation service in section 5.
- Authorities, when the law requires it, and the courts upon a court order.
International transfer: our servers are in the United States, and some processors, such as the CDN, process data in other countries, including in Europe. This transfer is made only to perform the service, under art. 33, IX, of Brazil's data protection law (LGPD).
8. Legal basis, retention and security
We process device data to perform the service you use and access logs to comply with a legal obligation and ensure security (LGPD, art. 7, items II, V and IX). We keep:
- the device record, while the device is registered or activated;
- access logs (date, time and IP) for 6 months, as required by Brazil's Internet Civil Framework (Marco Civil da Internet, art. 15).
Communication with our servers uses HTTPS. The security of the connection to your sources and your provider depends on them: if they do not use HTTPS, that traffic is not encrypted.
9. Children
The app is not directed to children under 13 and does not knowingly collect children's data. Adult categories are locked by a parental PIN.
10. Your rights (LGPD/GDPR)
You can ask for confirmation of processing, access, correction, portability or deletion of your data, and ask questions, at [email protected]. Include the Device ID (in Settings → General information) so we can find the device. We reply within 15 days. Access logs the law requires us to keep are kept for the period in section 8 even after a deletion request. See also the data deletion page. If you are not satisfied, you may complain to Brazil's data protection authority (ANPD). For the data your provider holds about you, contact them directly.
11. This website
This website has no sign-up, analytics or trackers. Like any website, the server and the delivery network log the IP address, the page requested and the browser, for security and operation, and delete these logs periodically. The Send playlist page uses a session cookie only while you manage a device.
12. Controller and data protection officer
The controller of the data described in this policy is the party responsible for Eluna Play. The contact channel with the data protection officer (LGPD, art. 41) is [email protected].
13. Changes and contact
If this policy changes, the date at the top is updated and the new version applies from its publication on this page. Contact: [email protected] · Support.